Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ee75e9b7-0cd1-3d9a-90ac-ec532f2ef9d8.roa
File:                     ee75e9b7-0cd1-3d9a-90ac-ec532f2ef9d8.roa (raw, json)
Hash identifier:          yno0SVtof/XkT63L0uSwQ47/1B1PBYdTxnKAG2ayr0A=
Subject key identifier:   20:35:2F:00:EA:8F:B5:A6:9A:55:B6:73:78:32:0C:CF:57:1D:9E:CD
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F1D1ED2F046536B9D9A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ee75e9b7-0cd1-3d9a-90ac-ec532f2ef9d8.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.34.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:1d:1e:d2:f0:46:53:6b:9d:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=5f7c3604-7a7b-4d56-aa73-8911e8e1976c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:50:36:f7:45:16:f9:68:6c:54:56:cc:d8:
                    ee:ec:dc:bd:c3:9b:01:ec:4d:8d:61:85:be:02:ca:
                    7a:0a:1e:6e:47:e2:c0:8c:d1:50:29:66:c3:74:fe:
                    29:ea:57:25:fe:39:db:15:10:74:c4:70:93:61:0b:
                    bc:c3:ed:0e:d4:59:36:36:64:f0:ab:76:12:31:79:
                    41:ff:c3:e9:8b:0f:8f:a2:5a:08:44:46:19:de:da:
                    17:e9:c3:7c:94:45:3a:44:dc:8b:c6:c4:a7:c7:68:
                    36:12:0d:99:56:23:af:a3:4d:09:8e:13:0b:3a:48:
                    74:59:9b:29:36:1c:d0:46:69:24:32:a6:b6:49:51:
                    dc:70:c4:58:a5:9b:88:2f:73:f3:54:42:37:9f:10:
                    93:49:2e:ad:6a:83:9c:3a:38:d4:b9:55:75:d9:fa:
                    f5:d0:3a:e8:b8:d3:13:10:c2:cc:ab:30:5a:31:91:
                    d1:37:d2:f8:2d:ef:0a:32:ca:9a:d0:78:8f:ff:d2:
                    38:4c:ea:19:41:87:b7:14:29:80:5b:1b:65:4d:d4:
                    b7:ec:8d:50:d5:ae:bb:cf:f6:77:1a:08:a0:5e:dd:
                    1a:c7:8c:dc:2e:47:ef:e2:dc:e2:10:e1:d3:d6:a7:
                    6e:ec:ae:54:c6:81:2d:1c:7a:e1:6a:59:a4:fa:a9:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:2F:00:EA:8F:B5:A6:9A:55:B6:73:78:32:0C:CF:57:1D:9E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ee75e9b7-0cd1-3d9a-90ac-ec532f2ef9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ef:35:b6:05:f3:8e:c1:99:ad:75:46:2a:30:b3:06:1a:d8:38:
         d1:bb:de:2b:11:ce:93:91:c1:f1:e8:2a:49:e2:f6:dc:f9:e2:
         93:ef:c7:a5:b0:39:b4:be:1c:08:a0:d5:9e:dd:85:6a:7f:a1:
         5a:db:d3:31:87:70:49:41:8a:df:ac:f6:0b:78:57:05:7e:bb:
         8e:8f:9d:be:75:18:78:24:89:a4:80:9a:14:32:0d:27:c4:7f:
         40:15:2d:64:52:5a:9d:e8:84:10:da:ea:5e:01:c4:28:ac:49:
         a9:5f:48:44:ab:23:fc:39:71:7d:48:2f:79:9d:0b:27:d4:40:
         a0:ab:dc:13:eb:39:f5:fc:00:d7:f2:74:2a:d4:b8:7d:b4:b5:
         96:16:af:26:51:d7:2d:b5:57:27:6f:9b:25:27:99:2e:8d:f7:
         83:6d:f3:fe:b5:12:f8:36:14:96:8c:c0:f6:85:f1:47:0e:92:
         0e:70:14:cf:1c:f7:39:16:49:49:8b:50:d3:a7:82:33:4c:1f:
         18:91:fe:4e:41:9b:d6:0e:07:b3:d1:cc:f9:fe:99:76:6f:18:
         12:29:e0:13:34:0c:28:24:b5:6e:aa:09:35:7c:73:aa:35:17:
         72:03:48:c8:43:73:99:da:8e:32:13:d6:0f:b6:c4:2e:e6:ce:
         24:81:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:20:37 2025 by rpki-client